Skip to content

v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@nadimtuhin nadimtuhin released this 14 Oct 19:16
· 47 commits to main since this release
v0.3.0
23c9794

Added

  • Local audit engine in Go: 72 page checks (36 SEO, 17 AEO, 19 GEO) and 7 opt-in site checks.
  • Output formats -format csv|json|sarif, CI gate -fail-under N, -sitemap and -site.
  • Composite GitHub Action that uploads SARIF to code scanning and gates on score.
  • MCP server (-mcp) and findable-mcp npm runner.
  • Cloudflare Worker edge API and web UI served from one source, with native rate limiting.
  • /learn articles on SEO, AEO, GEO and every check group.
  • Logo drafts, build story, cover image, CONTRIBUTING, SECURITY with an SSRF policy, issue and PR templates.
  • Strict golangci-lint and Biome configs, CI jobs and GoReleaser config.
  • Worker site files: /robots.txt, /sitemap.xml, /llms.txt, /llms-full.txt, JSON-LD in the home page head, and HSTS, X-Frame-Options and Referrer-Policy headers.
  • Worker static assets in worker/public/ (favicon, touch icon, og image), with a test that keeps them in step with the UI.
  • A test that scans the home page in-process and requires SEO 90, AEO 85 and GEO 80.
  • Bare hosts like example.com are accepted and scanned over https.
  • Share button, Markdown export and a WebMCP scan_url tool in the web UI.
  • The Go engine runs the four focus keyphrase checks.

Changed

  • Renamed the product to findable; module path is github.com/nadimtuhin/findable.
  • Split the CLI into cmd/findable and internal/ packages.
  • Results UI shows a score hero, family cards and a failing-first issue list with AA contrast colors.
  • The API returns the composite overall score.
  • Redesigned the web UI for the AI era; the worker bundle budget is now 50 KiB gzip.
  • JSON-LD parsing walks arrays, @type lists and nested nodes in both engines; only page-level or author Persons count as author schema.
  • A heading counts as a question when it starts with what, how or why, or ends with ?, in both engines.

Removed

  • The seoscore.tools remote mode; findable runs standalone.
  • Committed worker/dist, agent scratch notes and design mockups (now in nadimtuhin/design-fusion).

Security

  • Scan fetches block private and reserved addresses (including 6to4, Teredo and NAT64), allow only ports 80 and 443, re-check up to 5 redirects, and cap pages at 5 MB.
  • The worker UI is served with a hash-based CSP that refuses framing, plus nosniff.
  • Scans are rate limited to 10 a minute per client, IPv6 clients by /64.
  • -serve refuses local files and private targets.
Assets 2
Loading